when does a arp entry in the cache of a vsp-Switch deleted? Can this be modified?
Our problem is that we use a 60 minutes lease time at the DHCP server. And sometimes the NAC System reports a ARP spoofing event if DHCP server offers a new client a IP adress because of lease time. But in the arp cache of the Switch this IP belongs to the older MAC adress.